[Rdo-list] [rdo-manager] Authentication required during overcloud deployment
Sasha Chuzhoy
sasha at redhat.com
Wed Oct 14 23:26:05 UTC 2015
So, successful deployment creates the ~/overcloudrc file.
Once you source that file, the OS_AUTH_URL and OS_PASSWORD variables are initialized with the right values.
What you see is most probably because either the file wasn't sourced or the last deployment didn't complete as expected.
Thanks.
Best regards,
Sasha Chuzhoy.
----- Original Message -----
> From: "Erming Pei" <erming at ualberta.ca>
> To: "Sasha Chuzhoy" <sasha at redhat.com>
> Cc: rdo-list at redhat.com
> Sent: Wednesday, October 14, 2015 6:43:11 PM
> Subject: Re: [Rdo-list] [rdo-manager] Authentication required during overcloud deployment
>
> Hi Sasha,
>
> Thanks for the useful information. I can access the nodes in the way
> you indicated.
>
> (Just in case you have any comment on this)
> Before that I tried to verify the overcloud as shown in the guide
> (step after depolyment):
>
> $openstack overcloud validate --overcloud-auth-url $OS_AUTH_URL
> --overcloud-admin-password $OS_PASSWORD --network-id
> fe427999-d1ee-4bc1-b765-8cb91dbb4db7
>
> All I got are the "Invalid credentials" errors in each test:
> /
> setUpClass (tempest.thirdparty.boto.test_s3_ec2_images.S3ImagesTest)
> --------------------------------------------------------------------
>
> Captured traceback:
> ~~~~~~~~~~~~~~~~~~~
> Traceback (most recent call last):
> File "/home/stack/tempest/tempest/test.py", line 272, in setUpClass
> six.reraise(etype, value, trace)
> File "/home/stack/tempest/tempest/test.py", line 260, in setUpClass
> cls.setup_credentials()
> File "/home/stack/tempest/tempest/test.py", line 351, in
> setup_credentials
> credential_type=credentials_type)
> File "/home/stack/tempest/tempest/test.py", line 474, in
> get_client_manager
> cred_provider = cls._get_credentials_provider()
> File "/home/stack/tempest/tempest/test.py", line 452, in
> _get_credentials_provider
> identity_version=identity_version)
> File "/home/stack/tempest/tempest/common/credentials.py", line
> 39, in get_isolated_credentials
> identity_version=identity_version)
> File "/home/stack/tempest/tempest/common/isolated_creds.py", line
> 149, in __init__
> identity_version=self.identity_version)
> File "/home/stack/tempest/tempest/common/cred_provider.py", line
> 67, in get_configured_credentials
> identity_version=identity_version, **params)
> File "/home/stack/tempest/tempest/common/cred_provider.py", line
> 96, in get_credentials
> **params)
> File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line
> 481, in get_credentials
> ca_certs=ca_certs, trace_requests=trace_requests)
> File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line
> 182, in __init__
> super(KeystoneAuthProvider, self).__init__(credentials)
> File "/usr/lib/python2.7/site-packages/tempest_lib/auth.py", line
> 45, in __init__
> raise TypeError("Invalid credentials")
> TypeError: Invalid credentials/
>
>
> Besides, I logged into each node and checked the services but most of
> them are not running.
> Not sure if it's normal.
>
>
>
> But I will try to re-deploy again as you suggested with adding the
> HEAT_INCLUDE_PASSWORD=1 option.
>
>
>
> Thanks,
>
> Erming
>
> On 10/14/15, 4:20 PM, Sasha Chuzhoy wrote:
> > Hi,
> > So by default, when things work as expected, you should be able to login to
> > your overcloud nodes as heat-admin (i.e. ssh heat-admin@<IP>).
> >
> > I haven't seen this error, did you source the /home/stack/stackrc file
> > prior to attempting the deployment?
> >
> > I'd recomment you to remove the running/failed deployment and re-attempt to
> > deploy again.
> >
> > Best regards,
> > Sasha Chuzhoy.
> >
> > ----- Original Message -----
> >> From: "Erming Pei" <erming at ualberta.ca>
> >> To: rdo-list at redhat.com
> >> Sent: Wednesday, October 14, 2015 6:03:50 PM
> >> Subject: [Rdo-list] [rdo-manager] Authentication required during overcloud
> >> deployment
> >>
> >> Hi,
> >>
> >> I am deploying the overcloud in baremetal way and after a couple of
> >> hours, it showed:
> >>
> >> $ openstack overcloud deploy --templates
> >> Deploying templates in the directory
> >> /usr/share/openstack-tripleo-heat-templates
> >> ^[[A^[[BERROR: openstack ERROR: Authentication failed. Please try again
> >> with option --include-password or export HEAT_INCLUDE_PASSWORD=1
> >> Authentication required
> >>
> >>
> >> But I checked the nodes are now running:
> >>
> >> [stack at gcloudcon-3 ~]$ nova list
> >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
> >> | ID | Name |
> >> Status | Task State | Power State | Networks |
> >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
> >> | 1ba04ac0-fe2b-4318-aa31-2e5f4d8422a6 | overcloud-controller-0 |
> >> ACTIVE | - | Running | ctlplane=10.0.6.60 |
> >> | c152ba59-3aed-4fb0-81fa-e3fed7e35cf6 | overcloud-novacompute-0 |
> >> ACTIVE | - | Running | ctlplane=10.0.6.61 |
> >> +--------------------------------------+-------------------------+--------+------------+-------------+--------------------+
> >>
> >> 1. Should I re-deploy the nodes or there is a way to do update/makeup
> >> for the authentication issue?
> >>
> >> 2.
> >> I don't know how to access to the nodes.
> >> There is not an overcloudrc file produced.
> >>
> >> $ ls overcloud*
> >> overcloud-env.json overcloud-full.initrd overcloud-full.qcow2
> >> overcloud-full.vmlinuz
> >>
> >> overcloud-full.d:
> >> dib-manifests
> >>
> >> Is it via ssh key or password? Should I set the authentication method
> >> somewhere?
> >>
> >>
> >>
> >> Thanks,
> >>
> >> Erming
> >>
> >>
> >> _______________________________________________
> >> Rdo-list mailing list
> >> Rdo-list at redhat.com
> >> https://www.redhat.com/mailman/listinfo/rdo-list
> >>
> >> To unsubscribe: rdo-list-unsubscribe at redhat.com
> >>
>
>
> --
> ---------------------------------------------
> Erming Pei, Ph.D
> Senior System Analyst; Grid/Cloud Specialist
>
> Research Computing Group
> Information Services & Technology
> University of Alberta, Canada
>
> Tel: +1 7804929914 Fax: +1 7804921729
> ---------------------------------------------
>
>
More information about the dev
mailing list